A valid, authenticated LXCA user with elevated privileges may be able to execute command injections through crafted calls to a specific web API.
2023-06-26T20:15:10.247
2024-11-21T08:07:12.173
Modified
CVSSv3.1: 7.2 (HIGH)
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | lenovo | xclarity_administrator | < 4.0.0 | Yes |